WhatsApp Adds Biometric Authentication to Web & Desktop

WhatsApp, the widely used messaging application owned by Facebook and boasting over 2 billion users, has faced scrutiny and experienced a decline in users following announcements – and subsequent postponements – regarding alterations to its data usage policies. The platform continues to refine its privacy and security measures, and is now introducing a new biometric authentication feature for its web and desktop versions.

The company announced that, starting today, users will have the option to utilize a fingerprint, facial recognition, or iris scan to access WhatsApp on desktop or web, by connecting it to their mobile application. This will function in addition to the current QR code authentication method.

This new capability arrives alongside a “visual refresh” of the WhatsApp web linking and device management interface within the Android and iOS apps. The company indicates that further updates are planned for release in the near future.

The new feature allows users to incorporate biometric login, leveraging either fingerprint scanning, Face ID, or iris recognition – depending on their device – on Android or iPhone devices, as a supplementary authentication step. However, this functionality is contingent upon having biometric authentication already enabled on the user’s device.

Upon implementation, this feature will prompt users for biometric verification before a desktop or web version can be linked to their mobile account, supplementing the existing QR code process. The QR code method remains available; this addition serves as a secondary security measure, similar to enabling two-factor authentication on the mobile app.

WhatsApp specifies that on iPhones, the feature will be compatible with devices running iOS 14 and later, supporting both Touch ID and Face ID. On Android, it will function on any device equipped with Biometric Authentication, including Face Unlock, Fingerprint Unlock, or Iris Unlock. Detailed instructions for enabling this feature can be found here.

This development represents another step towards achieving greater consistency in features between WhatsApp’s primary mobile applications and its web and desktop interfaces.

Originally launched as a mobile messaging app, WhatsApp has progressively expanded its functionality over the years, introducing desktop support for iOS in 2015, for example.

While mobile usage still constitutes the majority of WhatsApp’s user base, external factors such as global health events that encourage indoor activity are likely contributing to increased utilization of its Web and native desktop applications, making the addition of more features in these areas logical.

WhatsApp informed TechCrunch that it intends to introduce additional features throughout the year to further align the desktop and mobile experiences. Significant disparities still exist; for instance, voice calls are currently unavailable on the WhatsApp web version. (This functionality may be forthcoming, as it has been observed in beta testing recently.)

Looking Ahead for Biometrics

Recent announcements from WhatsApp (and subsequent revisions) concerning data-sharing arrangements with Facebook have raised concerns among users regarding the company’s objectives.

This reaction is understandable, as messaging is often perceived as a highly personal and private communication space, distinct from the more public nature of traditional social networking platforms.

Over time, this perception has been challenged by data breaches, misuse of group messaging features, and (indeed) modifications to privacy policies.

Consequently, many individuals may harbor skepticism regarding Facebook’s intentions in this context.

WhatsApp clarifies that it does not have access to the biometric data stored on users’ devices, and that it utilizes the same standard biometric authentication APIs employed by other secure applications, such as banking apps.

The comparison to banking apps is noteworthy and warrants consideration. WhatsApp has been progressively integrating more features and functionalities, including the ability to make payments for goods and services, and in certain markets like India, it is testing the provision of insurance and pension products.

While this new biometric feature is currently being implemented to enhance the security of linking devices, it will be interesting to observe whether and how biometrics might be integrated into these other features as they are extended beyond the mobile platform, in pursuit of feature parity.

Update: The text has been revised to accurately reflect that the updated interface will be available on the mobile apps (not the web) and is designed to improve device management.